changeset 283:d29f477c51d4

Switch from IPs to hostnames for proxying This should work, aaccording to the Mythic Beasts blog: https://blog.mythic-beasts.com/2017/03/10/hosting-a-website-on-an-ipv6-pi-part-2-proxy-protocol/ and it's future-proof for IP changes
author IBBoard <dev@ibboard.co.uk>
date Sat, 15 Feb 2020 20:11:23 +0000
parents 6668c0708887
children 9431aec4d998
files manifests/nodes.pp
diffstat 1 files changed, 2 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/manifests/nodes.pp	Sat Feb 15 20:08:21 2020 +0000
+++ b/manifests/nodes.pp	Sat Feb 15 20:11:23 2020 +0000
@@ -19,7 +19,7 @@
 	class { 'ibboardvpsnode':
 		primary_ip => '2a00:1098:82:52::1',
 		proxy_6to4_ip => '2a00:1098:82:52::01d4', # ::old4 for IPv4!
-		proxy_upstream => ['2a00:1098::80:1000:3b:1:1', '2a00:1098::82:1000:3b:1:1' ],
+		proxy_upstream => ['proxy.mythic-beasts.com'],
 		mailserver => 'mail.ibboard.co.uk',
 		imapserver => 'imap.ibboard.co.uk',
 		firewall_cmd => 'iptables',
@@ -32,7 +32,7 @@
 	}
 	firewall { '090 Allow SSH (IPv4-to-IPv6)':
 		dport => 22,
-		source => '2a00:1098:0:82:1000:0:5d5d:826a',
+		source => 'geryon.mythic-beasts.com',
 		proto => 'tcp',
 		action => 'accept',
 	}